Sign in

v1

latestOpenAPI 3.0.02026-07-24311994.6 KB
Advanced Search

Advanced Search

Perform an advanced search to identify potential compromises with multiple filters (domains, employees, users, last compromised, last uploaded, company size, industry, country).

post/advanced-search

Request body

domainsstring[]

List of domains to search for. Accepts root domains (example.com) and will aggregate data across all subdomains. Between 1-500 domains can be specified per request.

min_employees_compromisednumber

Minimum threshold for employee compromises. Returns only domains with at least this many compromised employee accounts. Useful for filtering out domains with negligible compromise counts.

max_employees_compromisednumber

Maximum threshold for employee compromises. Returns only domains with no more than this many compromised employee accounts. Useful for focusing on organizations within specific size ranges.

min_users_compromisednumber

Minimum threshold for user compromises. Returns only domains with at least this many compromised user accounts. Helps identify domains with significant consumer impact.

max_users_compromisednumber

Maximum threshold for user compromises. Returns only domains with no more than this many compromised user accounts. Helps focus on domains with specific consumer impact ranges.

last_employee_compromisedstring date-time

ISO 8601 formatted timestamp (YYYY-MM-DDThh:mm:ssZ) to filter for domains with employee compromises after this date. Identifies domains with recent corporate breaches.

last_user_compromisedstring date-time

ISO 8601 formatted timestamp (YYYY-MM-DDThh:mm:ssZ) to filter for domains with user compromises after this date. Identifies domains with recent consumer-facing breaches.

last_employee_uploadedstring date-time

ISO 8601 formatted timestamp (YYYY-MM-DDThh:mm:ssZ) to filter for domains with employee data uploaded after this date. Reflects when the data became available in our system.

last_user_uploadedstring date-time

ISO 8601 formatted timestamp (YYYY-MM-DDThh:mm:ssZ) to filter for domains with user data uploaded after this date. Reflects when the data became available in our system.

company_sizesstring[]

List of company sizes to filter for. Accepts 1-10, 11-50, 51-200, 201-500, 501-1000, 1001-5000, 5001-10000, 10001+.

industriesstring[]

List of industries to filter for. Accepts 147 industries - list can be found at https://api.hudsonrock.com/company-filters.json

countriesstring[]

List of countries to filter for. Accepts 247 countries - list can be found at https://api.hudsonrock.com/company-filters.json

usa_regionsstring[]

List of USA regions to filter for. Accepts 57 regions - list can be found at https://api.hudsonrock.com/company-filters.json

sort_by'last_employee_compromised' | 'last_user_compromised' | 'last_employee_uploaded' | 'last_user_uploaded' | 'compromised_employees' | 'compromised_users'

Field to sort overview results by. Time-based sorting helps identify recent breaches, while count-based sorting identifies the most severely affected domains.

sort_direction'asc' | 'desc'

Direction to sort overview results. 'desc' prioritizes recent breaches or highest compromise counts (recommended for threat monitoring), while 'asc' shows oldest breaches or lowest counts first.

cursorstring

Base64 encoded pagination cursor for retrieving the next set of overview results. Obtained from the 'nextCursor' field in the previous response. Essential for processing large domain lists.

Example request

{
  "domains": [
    "hpe.com"
  ],
  "min_employees_compromised": 10,
  "max_employees_compromised": 100,
  "min_users_compromised": 5,
  "max_users_compromised": 50
}

Response

Successful operation

nextCursorstring

Base64 encoded cursor for the next page

Example response

{
  "data": [
    {
      "compromised_employees": 25,
      "compromised_users": 120
    }
  ]
}